Mambo Site Server is a website portal tool written in php. A couple of vulnerabilies have been discovered including XSS and Remote Code Execution on the server with server permissions. A couple of includes and upload codes do not check for admin access or any type of restriction and allow attackers to run arbitrary code without permission. ....full details